Writing Custom Scripts for OWASP Zed Attack Proxy
|
Do you want to automate your web security activities? Learn to write custom scripts with OWASP ZAP to detect and guard against application specific vulnerabilities while building security into the software.
Software delivery is becoming faster than ever and security is always trying to catch up with DevOps. Automated tools have proven to aid with rapid identification of security bugs, but it gets challenging when automated assessments aren’t customized to an application’s context. In this course, Writing Custom Scripts for OWASP Zed Attack Proxy, you will gain the ability to extend your dynamic application security assessments through the power of custom scripts. First, you will learn the various extension points in OWASP ZAP through the supported scripting types and scripting languages. Next, you will discover how to tackle some of the everyday challenges from effectively communicating security bugs to scripting complicated authentications for automated vulnerability assessments. Finally, you will explore how to identify common vulnerabilities specific to your application’s context and guarding against those vulnerabilities coming up again. When you are finished with this course, you will have the skills and knowledge of writing custom security scripts needed to incorporate essential DevSecOps activities.
Author Name: Marudhamaran Gunasekaran
Author Description:
Marudhamaran Gunasekaran is a Security Consultant and a DevSecOps Lead with DevOn, part of The Waada, Prowareness Group. He plays various roles at work including but not limited to a Security Coach, Trainer, Agile coach, and Compliance Manager. Maran takes joy in staying abreast with the security advancements, contributing to open source community with most recent contributions to OWASP projects, evangelizing security among DevOps professionals as an Ambassador for the DevOps Institute. Some of … more
Table of Contents
- Course Overview
1min - Preparing the OWASP ZAP Scripting Environment
21mins - Tampering the Requests and Responses with Proxy Scripts
23mins - Identifying Contextual and Custom Vulnerabilities through Scanner Scripts
36mins - Scripting Complicated Authentication Scenarios
28mins - Generating Custom Payloads for Fuzzing Operations
23mins - Regressing Security Vulnerabilities with Standalone Scripts
34mins - Wrap up and Summary
6mins
User Reviews
Be the first to review “Writing Custom Scripts for OWASP Zed Attack Proxy”
Related Products
Security Principles for CC℠
This course will teach you security concepts of information protection and assurance needed for the Certified in Cybersecurity Exam.
Securing Data Analytics Pipelines on AWS
As you start preparing for your AWS certified Data Analytics Specialty exam, you need to pay close attention to the security aspect of this certification. This course will teach you how to set up access control and encryption to your data analytics pipelines.
Cryptography Fundamentals for Developers and Security Professionals
Cryptography ensures confidentiality and authenticity of digital documents. The mathematics behind cryptography show us why, and how far, it can be trusted.
Building and Leading an Effective Threat Modeling Program
If you've seen the benefits of threat modeling in action and want to take this popular security approach to the next level, then this course will teach you how to plan, execute, and manage a threat modeling program at scale within your organization.
Security Engineering: Secure Endpoints
Endpoint security is an important consideration when evaluating the overall security of your systems. This course will teach you how to harden and monitor Windows, Linux, and container endpoints.
Credential Access with John the Ripper
John the Ripper (JtR) is widely used within red team assessments. Learn how to leverage the powerful capabilities of JtR to crack passwords of various hash types and use JtR within Metasploit.
There are no reviews yet.